High severity · published Jun 16, 2022
CVE-2022-27511
Corruption of the system by a remote, unauthenticated user
8.1
CVSS
12.7%
EPSS
No
On KEV
Description
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)12.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Application Delivery Management · Citrix
before 13.0-85.19; 13.1 before 13.1-21.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27511
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27511
Vendor Advisory
https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512
More from Application Delivery Management
10.0
CVE-2019-9548
Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control
8.8
CVE-2019-17366
Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control
6.5
CVE-2021-22920
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition…
5.3
CVE-2022-27512
Temporary disruption of the ADM license service